Sorry to bother, I am installing flyte-binary on O...
# flyte-support
q
Sorry to bother, I am installing flyte-binary on OKD, I already set extraRules in values.yaml like:
Copy code
rbac:
  create: true
  extraRules:
    - apiGroups:
      - ""
      resources:
      - serviceaccounts
      verbs:
      - create
      - get
      - list
      - patch
      - update
    - apiGroups: ["<http://admissionregistration.k8s.io|admissionregistration.k8s.io>"]
      resources: ["mutatingwebhookconfigurations/finalizers"]
      verbs: ["update"]
    - apiGroups: [""]
      resources: ["finalizers"]
      verbs: ["update"]
serviceAccount:
  create: true
  namespace: eric-mlops
but the flyte-binary pod throw an error:
Copy code
{"json":{"src":"start.go:226"},"level":"panic","msg":"Failed to start Propeller, err: failed to create mutatingwebhookconfiguration. Error: <http://mutatingwebhookconfigurations.admissionregistration.k8s.io|mutatingwebhookconfigurations.admissionregistration.k8s.io> \"flyte-backend-flyte-binary-webhook\" is forbidden: cannot set blockOwnerDeletion if an ownerReference refers to a resource you can't set finalizers on: , <nil>","ts":"2024-07-23T06:23:47Z"}
{"json":{"routine":"worker-6","src":"workers.go:118"},"level":"info","msg":"Exiting Worker","ts":"2024-07-23T06:23:47Z"}
panic: (*logrus.Entry) 0xc004cadd50
How to fix this issue, please?
I fixed it, I add extraRules
Copy code
- apiGroups: ["apps"]
    resources: ["replicasets/finalizers"]
    verbs:
    - create
    - get
    - list
    - patch
    - update
and helm upgrade flyte-backend, and it successful!!
a
thanks for sharing! I'm wondering if this is OKD-specific? Haven't had the need to set this before in other environments